List Info

Thread: Sensor in Web interface




Sensor in Web interface
country flaguser name
United States
2007-08-15 19:23:28
It looks like I got snort on one host as a sensor feeding
into the snort
database on another that is running the server/frameworkd.
The problem I
seem to be having now is that Monitors->Sensors shows the
sensor on the
localhost and the sensor running on 192.168.1.122, but it
doesn't show
any of the plugins available on either of the sensors. What
do I need to
check here?

brian
-- 
Brian Lavender
http://www.brie.com/brian/


------------------------------------------------------------
-------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and
a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Os-sim-support mailing list
Os-sim-supportlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/os-sim-s
upport

Re: Sensor in Web interface
user name
2007-08-18 04:34:38
That's weird, I just checked it here and everything works
fine.

If you got to Policy --> Sensors and click on a sensor
name, does it  
behave the same ?

Greetings,

Dominique

Am 16.08.2007 um 02:23 schrieb Brian Lavender:

> It looks like I got snort on one host as a sensor
feeding into the  
> snort
> database on another that is running the
server/frameworkd. The  
> problem I
> seem to be having now is that Monitors->Sensors
shows the sensor on  
> the
> localhost and the sensor running on 192.168.1.122, but
it doesn't show
> any of the plugins available on either of the sensors.
What do I  
> need to
> check here?
>
> brian
> -- 
> Brian Lavender
> http://www.brie.com/brian/

>
>
------------------------------------------------------------
---------- 
> ---
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems? 
Stop.
> Now Search log events and configuration files using
AJAX and a  
> browser.
> Download your FREE copy of Splunk now >>  http://get.splunk.com/
> _______________________________________________
> Os-sim-support mailing list
> Os-sim-supportlists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/os-sim-s
upport


------------------------------------------------------------
-------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and
a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Os-sim-support mailing list
Os-sim-supportlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/os-sim-s
upport

Re: Sensor in Web interface
country flaguser name
United States
2007-08-20 17:06:39
On Sat, Aug 18, 2007 at 11:34:38AM +0200, Dominique Karg
wrote:
> That's weird, I just checked it here and everything
works fine.
> 
> If you got to Policy --> Sensors and click on a
sensor name, does it  
> behave the same ?

If I go to Policy -> Sensors, I can click on the sensor
name which is
192.168.1.122 and then it comes up with a page like the
following.


  <h1> Sensors </h1>


<h2 align="center">192.168.1.122 [
cienfuegos ]</h2>  <table
align="center">
    <tr>
      <th> Plugin </th>
      <th> Status </th>
      <th> Action </th>

      <th> Enabled </th>
      <th> Action </th>
    </tr>
        </table>
      </td>
    </tr>
  </table>

You can see that no details regarding the plugins is shown.
Someone else
emailed me regarding this. I looked at the PHP code, but I
haven't
digested it yet, or was I able to find anything glaringly
wrong. I
looked at CVS to try and see what changes you made, but I
haven't
gotten too far there either.

brian

> 
> Greetings,
> 
> Dominique
> 
> Am 16.08.2007 um 02:23 schrieb Brian Lavender:
> 
> >It looks like I got snort on one host as a sensor
feeding into the  
> >snort
> >database on another that is running the
server/frameworkd. The  
> >problem I
> >seem to be having now is that Monitors->Sensors
shows the sensor on  
> >the
> >localhost and the sensor running on 192.168.1.122,
but it doesn't show
> >any of the plugins available on either of the
sensors. What do I  
> >need to
> >check here?
> >
> >brian
> >-- 
> >Brian Lavender
> >http://www.brie.com/brian/

> >
>
>--------------------------------------------------------
-------------- 
> >---
> >This SF.net email is sponsored by: Splunk Inc.
> >Still grepping through log files to find problems? 
Stop.
> >Now Search log events and configuration files using
AJAX and a  
> >browser.
> >Download your FREE copy of Splunk now >>  http://get.splunk.com/
> >_______________________________________________
> >Os-sim-support mailing list
> >Os-sim-supportlists.sourceforge.net
> >https://lists.sourceforge.net/lists/listinfo/os-sim-s
upport
> 

-- 
Brian Lavender
http://www.brie.com/brian/


------------------------------------------------------------
-------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and
a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Os-sim-support mailing list
Os-sim-supportlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/os-sim-s
upport

[1-3]

about | contact  Other archives ( Real Estate discussion Medical topics )